Hackers Drain $8 Million From Coinsbuy in Coordinated Tron and Ethereum Attack
What happened: On August 9, 2026, hackers exploited crypto exchange Coinsbuy, draining $8.
What happened: On August 9, 2026, hackers exploited crypto exchange Coinsbuy, draining $8.07 million across two blockchains—over $6 million USDT from eight Tron wallets and $1.89 million USDT plus 77 ETH from three Ethereum wallets. The attacker used a cross-chain swap service to link both chains, routing approximately $6.34 million through FixedFloat and laundering funds further via ChangeNOW and into Monero. Coinsbuy refilled the same drained addresses with nearly $3.93 million within 24 hours, suggesting the exchange retained wallet control. BlockWatchdog attributed the breach to a compromised withdrawal system, not stolen private keys. Coinsbuy has offered a $100,000 bounty for information about the attack.
Why it matters: This incident is part of a broader $972 million crypto theft spree in 2026, highlighting persistent vulnerabilities in exchange infrastructure. The use of Monero, especially after its August 2026 protocol upgrade removing key forensic tools, complicates recovery and investigation. The pattern of refilling compromised wallets suggests deeper operational or procedural flaws, raising concerns about hot wallet management and internal controls at exchanges.
Source: Decrypt